Firstly. Make a backup before making changes. Stop CAPsMAN. Remove all wireless interface names from existing bridges. On the router itself and on the access point.
Further. The CAPsMAN configuration, that you have set up, does not have a description of the parameters for frequencies in the 2.4 and 5 GHz bands.
I would recommend that you use a Google search for a "normal" step by step guide to setting up CAPsMAN.
As an example, made with one of my configurations, I demonstrate a configuration option (for ROS 7)
### Describe the parameters of "channels". that will be used for wireless interfaces.
/caps-man channel add band=5ghz-onlyac control-channel-width=20mhz extension-channel=XX frequency=5180,5220,5745,5805 name=channel-AW-50 save-selected=no tx-power=14
/caps-man channel add band=2ghz-onlyn control-channel-width=20mhz extension-channel=disabled frequency=2412,2437,2462 name=channel-AW-24 save-selected=no tx-power=10
### Describe the parameters of "datapath"
/caps-man datapath add bridge=bridge1 client-to-client-forwarding=yes interface-list=LAN local-forwarding=yes name=datapath-local-forwarding
/caps-man datapath add bridge=bridge1 client-to-client-forwarding=yes interface-list=LAN name=datapath-capsman-forwarding
### Describe the "configuration" parameters that will be used for the 2.4 and 5 GHz bands.
/caps-man configuration add channel=channel-AW-24 country=ukraine datapath=datapath-capsman-forwarding disconnect-timeout=5s distance=indoors frame-lifetime=5s guard-interval=any hw-protection-mode=rts-cts hw-retries=5 installation=any max-sta-count=20 mode=ap name=AW-cfg-2.4GHz-capsman rates.vht-basic-mcs="" .vht-supported-mcs="" rx-chains=0,1,2 security.authentication-types=wpa2-psk .disable-pmkid=yes .encryption=aes-ccm .group-encryption=aes-ccm .group-key-update=1h .passphrase=SecreT-Passw0rd ssid=MainWiFi tx-chains=0,1,2
/caps-man configuration add channel=channel-AW-50 country="united states" datapath=datapath-capsman-forwarding disconnect-timeout=5s distance=indoors frame-lifetime=5s guard-interval=any hw-protection-mode=rts-cts hw-retries=5 installation=any max-sta-count=20 mode=ap name=AW-cfg-5.0GHz-capsman rates.vht-supported-mcs="" rx-chains=0,1,2,3 security.authentication-types=wpa2-psk .disable-pmkid=yes .encryption=aes-ccm .group-encryption=aes-ccm .group-key-update=1h .passphrase=SecreT-Passw0rd ssid=MainWiFi tx-chains=0,1,2,3
### Describe the parameters that will be used by access points when connecting to CAPsMAN.
/caps-man provisioning add action=create-dynamic-enabled comment=Other hw-supported-modes=g,gn master-configuration=AW-cfg-2.4GHz-capsman name-format=identity
/caps-man provisioning add action=create-dynamic-enabled hw-supported-modes=an,ac master-configuration=AW-cfg-5.0GHz-capsman name-format=identity
By the way. And I also recommend revising the firewall settings.